Candidate: CVE-2010-0005 PublicDate: 2010-01-29 18:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0005 Description: query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access restrictions via a query. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_viewvc: upstream_viewvc: released (1.1.3) dapper_viewvc: DNE hardy_viewvc: ignored (reached end-of-life) intrepid_viewvc: needs-triage (reached end-of-life) jaunty_viewvc: ignored (reached end-of-life) karmic_viewvc: ignored (reached end-of-life) lucid_viewvc: ignored (reached end-of-life) maverick_viewvc: not-affected (1.1.5-1) natty_viewvc: not-affected (1.1.5-1) oneiric_viewvc: not-affected (1.1.5-1) precise_viewvc: not-affected (1.1.5-1) quantal_viewvc: not-affected (1.1.5-1) raring_viewvc: not-affected (1.1.5-1) saucy_viewvc: not-affected (1.1.5-1) devel_viewvc: not-affected (1.1.5-1)